CVE-2016-10214

Memory leak in the virgl_resource_attach_backing function in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_ATTACH_BACKING commands.

• CWE-399

• http://www.openwall.com/lists/oss-security/2017/02/09/5Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/96181Third Party Advisory, VDB Entry
• https://cgit.freedesktop.org/virglrenderer/commit/?id=40b0e7813325b08077b6f541b3989edb2d86d837Patch, Third Party Advisory
• https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.htmlPatch, Third Party Advisory
• https://security.gentoo.org/glsa/201707-06
• http://www.openwall.com/lists/oss-security/2017/02/09/5Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/96181Third Party Advisory, VDB Entry
• https://cgit.freedesktop.org/virglrenderer/commit/?id=40b0e7813325b08077b6f541b3989edb2d86d837Patch, Third Party Advisory
• https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.htmlPatch, Third Party Advisory
• https://security.gentoo.org/glsa/201707-06

Published

Mar 20, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-10209The archive_wstring_append_from_mbs function in archive_stri…
• CVE-2016-1021Adobe Flash Player before 18.0.0.343 and 19.x through 21.x b…8.8
• CVE-2016-10210libyara/lexer.l in YARA 3.5.0 allows remote attackers to cau…
• CVE-2016-10211libyara/grammar.y in YARA 3.5.0 allows remote attackers to c…
• CVE-2016-10212Radware devices use the same value for the first two GCM non…
• CVE-2016-10213A10 AX1030 and possibly other devices with software before 2…
• CVE-2016-10215An issue was discovered in Fastspot BigTree bigtree-form-bui…
• CVE-2016-10216An issue was discovered in IT ITems DataBase (ITDB) through …
• CVE-2016-10217The pdf14_open function in base/gdevp14.c in Artifex Softwar…
• CVE-2016-10218The pdf14_pop_transparency_group function in base/gdevp14.c …
• CVE-2016-10219The intersect function in base/gxfill.c in Artifex Software,…
• CVE-2016-1022Adobe Flash Player before 18.0.0.343 and 19.x through 21.x b…8.8